tZERO Crypto: BTC, ETH, & moreApp Store
Our wallet review process
We examine wallets starting at the code level and continue all the way up to the finished app that lives on your device. Provided below is an outline of each of these steps along with security tips for you and general test results.
Application build test result
(Analysis from Android review)
The description on Google Play lists its features:
An easy and secure way to instantly buy, manage, and sell Bitcoin, Ethereum, Dogecoin, Litecoin, Ravencoin and many more.
Also on the same page, a few paragraphs down:
We do not hold your crypto. When you purchase Bitcoin, Ethereum, Dogecoin, Litecoin, Ravencoin etc., it is sent from the point of purchase directly to your private wallet. Unlike many sites & exchanges, this means that no one will steal your crypto!
While at the interim, this may seem confusing, we dug around a bit more and found the explanation in tZERO Crypto app’s Terms and Conditions:
You also agree to take any steps necessary that we or the Custody Provider request to confirm such authority to such External Wallet. tZERO Crypto reserves the right to restrict, delay, or cancel any Deposit or Withdrawal if it perceives a risk of fraud orother illicit activity. When you initiate Withdrawal Transactions, tZERO Crypto will transmit the instructions to the Custody Provider who will conduct the transaction.
After some Googling, we found that tZERO has partnered with Prime Trust as its “Custody Provider”.
The app through technological means, acts as a middle man who “sends instructions” to another middle man, which is Prime Trust. We took a look at the custodial service of Prime Trust and saw this at the bottom of their ‘Prime Custody’ page.
We offer both wallets that require manual signing as well as wallets with programmatic signing. Our smart contracts have all undergone independent security that audits in addition to our routine IT examinations and penetration testing.
The rationale for this “passing around of custody” has to do more with the legal nature of cryptocurrencies as tZERO Group Inc. is a Delaware, USA based company while its cryptocurrency related company tZERO Crypto Inc., is registered in Utah. As such we determined this app to be custodial and therefore not verifiable.
Tests performed by Daniel Andrei R. Garcia
Do your own research
In addition to reading our analysis, it is important to do your own checks. Before transferring any bitcoin to your wallet, look up reviews for the wallet you want to use. They should be easy to find. If they aren't, that itself is a reason to be extra careful.